We should bump com.nimbusds.jose-jwt in both jaxrs-jwt and microprofile-jwt quickstarts, to solve those security alerts. We should also take the opportunity to sync on the version used.